Privacy

The legal regulations for the protection of your data can be found in the Basic Data Protection Ordinance and in the Federal Data Protection Act.

Responsible body in the sense of the data protection regulations is frostkrone Tiefkühlkost GmbH, Konrad-Adenauer-Straße 28, D-33397 Rietberg, info@frostkrone.de, Tel.05244.90360.

Below you will find information on which personal data - this is all data that identifies you or makes you identifiable, such as name, address, e-mail address or user behaviour - we record during your visit to our site and how these are used. If you have any further questions, please do not hesitate to contact us at info@frostkrone.de.

You also have the right to complain to a supervisory authority in the event of unlawful use of the data. The one responsible for us is:

State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf, Germany
Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

1. Use and forwarding of personal data

a. General information
If you have provided us with personal data, we use it to answer your inquiries, to advise and process contracts concluded with you and for technical administration. Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing, if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke a given consent with effect for the future at any time, see also paragraph 4 regarding your rights as a person affected.

b. contract execution
Within the framework of contracts concluded with you concerning the production and delivery of finger food, we collect and store the personal data transmitted by you, e.g. name, address, for the purpose of contract processing, e.g. also for invoicing.

The data is passed on upon delivery to the commissioned transport service provider and within the framework of invoicing to banks. The accounting data is transferred to the tax office and the tax office within the framework of tax law regulations.

The legal basis for the collection and processing of the data is Art. 6 I (b) DSGVO. The legal basis for the transfer of data to the tax office and tax office is Art. 6 I (c) DSGVO.

This data will be deleted upon expiry of the applicable statutory retention obligations. Insofar as we are not legally obliged to retain data, the data will be deleted when the purpose ceases to apply.

c. Contact form and inquiry by e-mail
When using our contact form, we collect and store the name and e-mail address for the purpose of answering your inquiry. The specification of the telephone number for a callback is optional.

Send us a contact request by e-mail, we collect and store the e-mail address and the data contained in the e-mail.

The legal basis is Art. 6 I (a) DSGVO, as you consent to the above-mentioned processing of your data when using the form and sending an e-mail.

In addition, the legal basis also results from Art. 6 I (b), as the storage of the data is necessary for the fulfilment of a pre-contractual or possibly later contractual relationship.

The data will be deleted when the purpose of storage has ceased to apply, i.e. after answering your e-mail/contact form enquiry or when the matter connected with the enquiry has been finally clarified.

You have the right to revoke your consent at any time without affecting the legality of the processing based on the consent.

For the right to cancellation and information, see below 4 on your rights as a party concerned.

2. Server data collection and Cookies

a. Server data collection

When you visit our site, various server statistics are automatically stored, which your browser transmits to our provider's server. Among other things

    • Name of the accessed website
    • dataset
    • Date and time of retrieval
    • transferred data volume
    • Notification of successful retrieval
    • Browser type and version
    • the user's operating system
    • Referrer URL (the previously visited page)
    • IP address and the requesting provider

    logged.

    This data is used for statistical evaluation of visits to our site and cannot be assigned to specific persons. The legal basis for data collection is Art. 6 I f DSGVO. These data are not combined with other data sources. The IP address is anonymized. Our legitimate interest in collecting this data is based on the fact that we can use the data to optimise our services for users, for example by preventing access to malicious sites or optimising access via certain browsers, and that the log of the IP address makes it possible to deliver the site to the visitor in the first place.

    In principle, you have a right to object to this data collection. This is not considered here as an exception, as otherwise the use of the site would be impossible.

    The data will be deleted as soon as they are no longer required for the above-mentioned purposes.

    b. Cookies

    This site does not use its own cookies.

    3. Google Fonts

    This website uses external fonts in the form of Google Fonts to display fonts uniformly. Google Fonts is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ("Google").

    When you visit our site, your browser loads the required web fonts directly from a Google server into your browser cache to display texts and fonts correctly. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the visitor's terminal device is also stored by Google. If your browser does not support web fonts, a default font is used by your computer.

    The legal basis for the use of Google Fonts is Art. 6 I (f) DSGVO. Our legitimate interest arises from the fact that we can present the fonts to you in a uniform form. Google LLC. is certified under the US Privacy Shield to ensure a level of data protection appropriate to the DSGVO. We have entered into an order processing agreement with Google LLC under which Google Inc. will demonstrate to us that it has taken appropriate and appropriate technical and organizational measures to protect your personal data.

    disagreement
    If you as a visitor to our website do not want to use the Google fonts function and thus also want to prevent the transmission of your IP address to Google, you can have connections to fonts.googleapis.com blocked by a browser add-on such as NoScript or Ghostery for Firefox. In this case, however, it could be that the use of our website is not possible in its entirety.

    Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

    You have the right to access and object to your data stored by us at any time, see below. Paragraph 4 on your rights as a person affected.

    4. Rights of the persons concerned

    a, Rights to information
    You have the right to free information about your personal data stored by us at any time. You may request the following information. We must provide the information within one month:

    (1) the purposes for which the personal data are processed;

    (2) the categories of personal data being processed;

    (3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;

    (4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

    (5) the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;

    (6) the existence of a right of appeal to a supervisory authority;

    (7) any available information on the origin of the data if the personal data are not collected from the data subject;

    (8) the existence of automated decision making including profiling in accordance with Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject. We would like to point out that such automated decision-making does not take place on our part.

    (9) whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 DSGVO in connection with the transmission.

    b, Right to correction
    You have the right to request us to correct any incorrect personal data concerning you or to complete incomplete personal data without delay.

    c, Right to cancellation
    You have the right to have your personal data deleted immediately and we are obliged to delete this data immediately if one of the following reasons applies:

    (1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

    (2) You revoke your consent on which the processing was based pursuant to Art. 6 I (a) and there is no other legal basis for the processing.

    (3) In accordance with Art. 21 I DSGVO, you object to the processing of your data, which we collect on the basis of our stated legitimate interests (e.g. Google Analytics), and there are no overriding legitimate reasons for processing, or you object to processing in the context of direct advertising in accordance with Art. 21 II DSGVO.

    (4) We have processed the personal data concerning you unlawfully, for example without your consent or without legitimate interests.

    (5) The deletion of personal data concerning you is required in order to fulfil a legal obligation incumbent on us under Union law or German law.

    (6) The data was collected in the context of information society services offered to you as a minor in accordance with Art.8 ADSGVO.

    If we have published personal data of yours and we are obliged to delete it for one of the aforementioned reasons, we will inform the companies on whose websites the data were published about your request for deletion in an appropriate manner and explain that you as the person concerned have requested us to delete all links to this data and to delete all copies or replications.

    Exemptions
    The right to cancellation does not exist insofar as the processing is necessary

    (1) to exercise freedom of expression and information;

    (2) to fulfil a legal obligation which is required for processing under the law of the Union or German law, e.g. within the framework of tax law obligations to retain data, or to perform a task which is in the public interest or which is carried out in the exercise of official authority which has been transferred to us;

    (3) for reasons of public interest in the field of public health in accordance with Art. Art.9 II (h) and (i) and Art.9 III DSGVO;

    (4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (I) DSGVO, insofar as the right to cancellation is likely to render impossible or seriously impair the attainment of the objectives of such processing, or

    (5) to assert, exercise or defend legal claims, e.g. in court proceedings.

    d, Right to limitation of data processing
    You have the right to request us to restrict processing if one of the following conditions is met:

    (1) If you dispute the accuracy of the personal data for a period of time that enables us to verify the accuracy of the personal data,

    (2) If the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted.

    (3) If we no longer need the personal data for the purposes of processing, but you did need them to assert, exercise or defend legal claims.

    (4) If you have objected to the processing of your personal data, which we collect on the basis of our justified interests (e.g. Google Analytics), as long as it is not yet clear whether our justified reasons outweigh your rights.

    If the processing has been restricted in accordance with the aforementioned reasons, these personal data may only be processed - apart from their storage - with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person (GmbH, AG etc.) or for reasons of an important public interest of the Union or a Member State.

    If you have obtained the restriction on processing, you will be informed by us before the restriction is lifted

    e,Duty to report
    If you have exercised your right of rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

    You have the right vis-à-vis us to be informed about these recipients.

    f, Right to transferability
    You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another company without obstruction by us, provided that

    (1) the processing is based on a consent pursuant to Art. 6 (I) DSGVO or on a contract pursuant to Art. 6 I (b) DSGVO and

    (2) processing is carried out by means of automated methods.

    In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by us to another company, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

    The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us

    g, Right of objection
    You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Art. 6 I (e) - necessary processing on the basis of a public interest task or (f) DSGVO - processing demonstrating our legitimate interest, e.g. in online marketing -; this also applies to profiling based on these provisions.

    We will no longer process personal data relating to you unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

    If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

    If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

    You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

    h, Right to revoke the data protection declaration of consent
    You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

    i, Contact for Rights of Persons Affected
    If we do not allow you to exercise your rights directly during processing, please contact us at info@frostkrone.de or by post at the address given in the imprint.

    5. Data processing through social networks

    We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

    Social networks such as Facebook can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

    If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

    Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

    Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

    Legal basis
    Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).

    Responsibility and assertion of rights
    If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).

    Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

    Storage time
    The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.

    We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

    Individual social networks

    Facebook
    We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.

    We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link:

    https://www.facebook.com/legal/terms/page_controller_addendum

    You can customise your advertising settings independently in your user account. Click on the following link and log in:

    https://www.facebook.com/settings?tab=ads.

    Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

    Instagram
    We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875

    XING
    We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

    LinkedIn
    We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified under the EU-US Privacy Shield. LinkedIn uses advertising cookies.

    If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

    For details on how they handle your personal information, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

    With regard to your rights as a person concerned, see section 4 above.

    Version July 2019